General
- Target 2026-09-30_12521e11de62d8dcaf17c070ca410df9_cobalt-strike_icedid_njrat_satacom_vidar
- Size 849KB
- Sample261001-w8w3lavdrd
- SHA256 cf153148d8ab1237c578625ceaa1573dd05ca6fdae99cd0bbe94177e13b9f6e1
- MD5 12521e11de62d8dcaf17c070ca410df9
- SHA1 b4d518e32b833649af144d1f17ab128d6116542f
- SHA512 92a544e788a8b4233fe0be5284dca5b8dfec1f01f75afad2d30985256d3341694b87fed842d18a9866feeb3c4ab2d21a6d8cbff99266c787f788f4907e2ca05c
- SSDEEP 24576:ge7JUtiaEGVkvqCJ+H5Ih9Xtlm0wVOPMMCEJI8I:TRaETqCJ+H5Ih9kOPMhr
- TLSH T13E058C8363EC2CD4E172913597338A86C7B5BC6106B1C34E43E5126E4F3B6A77E29B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-30_12521e11de62d8dcaf17c070ca410df9_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_12521e11de62d8dcaf17c070ca410df9_cobalt-strike_icedid_njrat_satacom_vidar.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
bazarloader
C2
-
5.2.78.37
-
198.244.194.4
-
38.92.191.89
-
45.14.226.23
-
reddew28c.bazar
-
bluehail.bazar
-
whitestorm9p.bazar
Targets
-
- Target 2026-09-30_12521e11de62d8dcaf17c070ca410df9_cobalt-strike_icedid_njrat_satacom_vidar
- Size 849KB
- SHA256 cf153148d8ab1237c578625ceaa1573dd05ca6fdae99cd0bbe94177e13b9f6e1
- MD5 12521e11de62d8dcaf17c070ca410df9
- SHA1 b4d518e32b833649af144d1f17ab128d6116542f
- SHA512 92a544e788a8b4233fe0be5284dca5b8dfec1f01f75afad2d30985256d3341694b87fed842d18a9866feeb3c4ab2d21a6d8cbff99266c787f788f4907e2ca05c
- SSDEEP 24576:ge7JUtiaEGVkvqCJ+H5Ih9Xtlm0wVOPMMCEJI8I:TRaETqCJ+H5Ih9kOPMhr
- TLSH T13E058C8363EC2CD4E172913597338A86C7B5BC6106B1C34E43E5126E4F3B6A77E29B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Bazar Loader
Detected loader normally used to deploy BazarBackdoor malware.